Extracted

• • Target

    7885d083cda2b5be4bfd33eaf138a9df

  • Size

    806KB

  • MD5

    7885d083cda2b5be4bfd33eaf138a9df

  • SHA1

    e8a131256dcc6b616203e43d54f561016e31c5b2

  • SHA256

    e8815d23a30784440c043d16e0b62dfd5107c68f7139075b947575fee940a651

  • SHA512

    91fe35e58039214914eb30fd233261844fff46e39764cafdfa47a8dc17980cb5219d56c4c4c1d9b8bfcd83c7271f496c3c36443224a6ede89f85bc9668c33f08

  • SSDEEP

    12288:RSuXry7iS/d348plpPVTfaropWnLOciYbJiH6fRMxrYxDERYvXNt:Rtr9S/d3PVaoKZiY2IemJEoNt

  Score

  10^/10

  formbookfndyratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2